[New-bugs-announce] [issue34591] smtplib mixes RFC821 and RFC822 addresses

[Quae Quack]

New submission from Quae Quack <quae at daurnimator.com>:

smtplib.sendmsg is documented to take RFC822 addresses. and e.g. if the `to_addrs` argument isn't provided then it gets the To address directly from the headers (which is in RFC822 form).

However it then proceeds to use it as an RFC821 address and sends it over the SMTP connection. https://github.com/python/cpython/blob/874809ea389e6434787e773a6054a08e0b81f734/Lib/smtplib.py#L542

----------
components: Library (Lib)
messages: 324653
nosy: Quae Quack
priority: normal
severity: normal
status: open
title: smtplib mixes RFC821 and RFC822 addresses
type: security

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue34591>
_______________________________________